Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          aJwq1vnUJkv31b1/5NrQM83un87xDXFWadgseZEE2N0=
Subject key identifier:   3D:33:D6:3D:12:2B:FC:96:CC:C8:F3:A9:D0:9F:19:25:F7:D5:D8:63
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       01A1DA938E85E33261DE5DD4FC22160DA0B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          1676
Signing time:             Sat 14 Nov 2026 15:01:05 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:05 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:05 +0000
Files and hashes:         1: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
                          2: 9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa (hash: nBNjrBaYUqrOCrF+/FR62x6XTWdXCs1MeSMbxH9/U3o=)
                          3: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
                          4: H1emVUICE2XmoUB3lCjzmQnd6Ak.roa (hash: OQbtHQhbOceKidpOYtukQNjTxgTngWpdYul9lp5ld+E=)
                          5: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
                          6: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
                          7: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
                          8: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (hash: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=)
                          9: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
                          10: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
                          11: Qpqd5hHnjqSsp3sn5RVpGOfpq2g.roa (hash: usudWUM+M6fpK5Kxq+vyQ1DEZbBsRF3RxCtpG9oZ+NM=)
                          12: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
                          13: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
                          14: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
                          15: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
                          16: eeAdU61dAEl487F3Ap6OJwVb3nY.roa (hash: Oh4fcwbJQjn9UMX01F08qYKp+6j3kQnbTRmMOn57gYE=)
                          17: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
                          18: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
                          19: pW8tLTuchAg2ENsSB_m1O9IFRMk.roa (hash: DPFg9BfL6u//Ewp7gKsR79UQBua9iboqwpz2s8NPVM8=)
                          20: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: NimBEbbfMDfn3+Sc7cx9YnbnWCFATMQwdrNHUJYpfm8=)
                          21: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
                          22: wfh-UOAZf8zXcfnGgtljGrgtW4Y.roa (hash: v/XrCw+3zSPx3FlcLzuKPWemLUh1+me4/h0qQHJfqdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:93:8e:85:e3:32:61:de:5d:d4:fc:22:16:0d:a0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Nov 14 15:01:05 2026 GMT
            Not After : Nov 15 15:01:05 2026 GMT
        Subject: CN=3d33d63d122bfc96ccc8f3a9d09f1925f7d5d863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:42:e4:d0:81:9a:06:70:10:e5:47:eb:81:
                    8c:cd:7f:f1:b4:67:a1:cd:85:16:39:45:70:c8:6c:
                    97:af:ba:c8:e8:f2:91:bb:10:e8:58:59:15:26:4b:
                    a3:41:c5:b4:18:59:b2:5b:b0:52:dc:9f:0b:8c:b2:
                    a8:b3:44:fc:eb:95:03:13:53:ac:d9:50:6d:46:30:
                    a5:cc:6a:c1:b4:1c:6e:0c:2f:9e:64:f7:32:79:cb:
                    36:49:1b:39:0d:fa:14:3a:7a:f6:ad:20:69:17:41:
                    51:7f:a1:6b:0a:d7:a7:b3:fc:7e:5f:b2:56:4d:7c:
                    a4:d0:61:e9:cf:d2:2f:bc:c9:76:68:1b:95:2b:31:
                    d0:d0:bf:85:0b:38:21:ed:e7:08:a6:5d:9a:97:d2:
                    ba:66:a9:7e:ce:c5:5a:56:07:e4:7c:04:79:52:f7:
                    f0:3b:e8:85:4b:79:98:a0:0b:54:70:1c:31:fb:1f:
                    c8:7e:31:b9:bd:8c:c8:e5:81:1f:8f:8f:cf:76:87:
                    e5:c1:94:98:23:32:c6:b7:d3:0e:bb:c2:3b:36:86:
                    59:01:ec:76:e2:57:10:fe:f8:7f:7b:b4:31:83:8e:
                    f7:d9:7c:f3:33:b5:80:c4:da:f5:ee:8f:f9:ab:6b:
                    6f:33:8e:14:bb:5c:b9:2c:7e:59:0e:93:da:dd:23:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:33:D6:3D:12:2B:FC:96:CC:C8:F3:A9:D0:9F:19:25:F7:D5:D8:63
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:34:df:26:b4:d1:57:6a:7f:a0:a5:d5:43:98:5b:44:38:a4:
         95:bf:fa:84:59:de:d8:43:36:a1:0f:18:24:01:93:ab:fc:1d:
         a4:e7:18:3d:85:7a:e4:4b:48:5b:b0:cb:e8:71:69:ff:ea:80:
         11:85:e9:2f:56:fe:5a:64:7c:2a:5d:35:e3:96:67:ae:84:b4:
         db:58:0c:f3:6d:c8:6e:38:45:9e:78:1f:c5:2c:06:09:c4:3f:
         73:43:06:75:46:dd:d8:36:77:b6:7f:89:a9:6b:69:ce:7d:b6:
         3b:37:fb:63:7f:9a:ca:c4:5d:cf:9e:ff:d9:a6:92:fb:09:e3:
         42:3e:28:93:5a:e8:a9:30:93:87:c7:d9:bc:a3:fc:43:55:8b:
         e1:78:21:bb:ed:33:cd:66:a7:e5:b7:94:2c:e3:d7:f3:28:50:
         56:08:c6:b5:c7:fb:aa:91:76:65:a2:ca:2b:6e:7d:7d:d4:e5:
         75:4c:c6:2c:04:8d:88:c5:9a:2d:a2:3d:98:89:85:46:28:88:
         25:0f:2d:58:0c:44:05:97:db:53:02:4f:bd:eb:58:af:16:11:
         81:23:31:b6:95:51:de:22:1f:d1:88:65:81:7c:19:c1:f3:5d:
         95:62:46:29:0e:78:f6:76:91:6e:19:a6:52:3f:03:31:50:8f:
         ac:7a:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:39:00 2026 by rpki-client